We noticed that the "Remember me" checkbox and "Remember this browser" (when Email 2fa is activated) does not have any impact on the next login.
Even though the Identity.TwoFactorRememberMe cookie does exists, and that the "signInManager.TwoFactorSignInAsync" have the correct parameters, this bellow always returns "RequiresTwoFactor" (again, only when email 2fa is activated for this account).
var signInResult = await _signInManager.SignInOrTwoFactorAsync(loginResult, loginModel.RememberMe); / if (signInResult.RequiresTwoFactor) { return Json(new AjaxResponse { TargetUrl = Url.Action( "SendSecurityCode", new { returnUrl = returnUrl, rememberMe = loginModel.RememberMe }) }); }
You can easily reproduce this with your default project. Just edit the default user to use Email 2fa, and try to check the "Remember me" and "Remember this browser" checkbox on the next login. You will always be prompted to enter your credentials and 2fa, so it appears it does not have any effect.
We created a new project within the solution in order to interact with a second database (which does not contain Identity). We've inherited the Abp framework in this project. The application works as normal when running it.
The problem comes when running the unit tests. The following exception occurs:
There is already a similar issue in this question but does not solve our problem.
What is causing this issue? Some package missing?
Hello all!
I'm trying to use Google SSO in order to make users login in my application.
I go to https://console.developers.google.com/ , get the ClientId and the ClientSecret and place them in the appsettings.json of the application.
It is a multi-tenant application, so each tenant will have its own subdomain. For instance, client.mydomain.com and client2.mydomain.com.
Since Google does not support wildcards in order to match all the subdomains, how can I achieve a behavior where, regardless of the subdomain used, Google SSO works?
I get this error, if I try to achieve a subdomain that is not in the list of authorized URIs: Erro 400: redirecturimismatch The redirect URI in the request, https://client2.mydomain.com/signin-google, does not match the ones authorized for the OAuth client. To update the authorized redirect URIs, visit: https://console.developers.google.com/apis/credentials/oauthclient/${yourclientid}?project=${yourprojectnumber}
Of course, if I put all my subdomains in Google in the authorized URIs it will work, but it is not a good practice to do that everytime a new tenant is added.
How can achieve the behavior?
